How Data Brokers Get Your Phone Number and How to Keep It Out

Where Brokers Get the Number

The people-search sites do not collect numbers themselves. They buy from a second tier of aggregators, who in turn source from four kinds of feed. Public records supply names and addresses. Marketing databases supply the phone number you typed into a retailer's loyalty programme, a car dealership's quote form, a warranty registration, or a sweepstake, most of which have a clause licensing the data to partners. App and website signups supply the number you gave to verify a marketplace, a delivery app, or a dating profile, once that company sells or leaks its user table. Breach dumps supply everything at once.

Contact-list uploads are the feed most people do not know about. When a friend installs WhatsApp, Facebook, Instagram, TikTok, Snapchat, or Telegram and taps "find friends", the app uploads their whole address book, with your name as they saved it and your number. You never consented and may not even use the app. Facebook was fined for using numbers collected this way for advertising, and the 2021 Facebook leak of 533 million phone numbers was built by scraping the contact-import endpoint. Brokers ingest those datasets like any other.

The number is the join key that lets a broker merge a loyalty-card record with a breach record with a public-records record. An email changes; a phone number rarely does. That persistence is why the number is the most valuable field in the file and why keeping it out of new records is worth the effort.

The Major Brokers and What They Expose

The names that come up in a reverse-phone search are a handful of large operators and their many rebrands. Whitepages and its premium tier, Spokeo, BeenVerified, Intelius, PeopleFinders, TruePeopleSearch, FastPeopleSearch, Radaris, and the Epsilon and Acxiom feeds behind many of them. Several of these are owned by the same parent companies and share data, so one opt-out sometimes clears several sites, and sometimes does not.

A typical reverse-phone result shows full name, age, current and previous addresses, relatives and associates, email addresses, and sometimes employer and property records. The paid tiers add court records and social profiles. That is the packet an attacker uses to start a SIM swap at your carrier, which is described at /blog/sim-swap-protection, and it is the packet a stalker, a scammer, or a hostile ex uses to find where you live.

Opting Out of the Major Brokers

Every major broker has an opt-out, usually because state laws in California, Vermont, and elsewhere require one. They are per-broker, and most require you to find your own listing first and confirm via email. The routes below are current as of writing; brokers move their pages, so search the broker name plus "opt out" if a link fails.

• Whitepages: whitepages.com/suppression-requests. Paste your listing URL, confirm by phone call to a number you control. Covers Whitepages and 411.com.
• Spokeo: spokeo.com/optout. Paste your listing URL and confirm via email. Spokeo re-adds records if new source data arrives, so repeat annually.
• BeenVerified: beenverified.com/app/optout/search. Search your name, select the record, confirm by email. The same form covers its sister sites PeopleLooker and NeighborWho.
• Intelius and PeopleFinders: both use the PeopleConnect suppression centre at suppression.peopleconnect.us, which also covers TruthFinder, Instant Checkmate, and US Search.
• TruePeopleSearch and FastPeopleSearch: each has a "remove my record" page linked from the footer. No account needed; a CAPTCHA and an email confirmation.
• Radaris: radaris.com/control/privacy. Requires creating an account to claim and then remove the profile.
• Acxiom and Epsilon (the upstream feeds): isapps.acxiom.com/optout and epsilon.com/privacy-policy opt-out. Suppressing these reduces re-population of the downstream sites.
• Google: use the "Results about you" tool at myactivity.google.com/results-about-you to request removal of search results showing your phone number, which does not delete the broker record but makes it harder to find.

Why Opt-Outs Do Not Stay Done

A removal request deletes the record from that broker's public listing at that moment. It does not delete the underlying data at the aggregator, and when the broker refreshes its feed, the record often comes back. Whitepages and Spokeo both say as much in their policies. Users who audit annually report roughly a third of removed listings reappearing within twelve months.

Paid removal services (DeleteMe, Optery, Incogni, Kanary) automate the resubmission and are worth the cost for anyone with a real safety concern, but they are running the same per-broker forms on a schedule. The list of brokers is also longer than the sites you have heard of; Optery tracks over 300. Complete removal is not a state you reach, it is a process you keep running.

This is the limit of the opt-out approach, and it is why the second half of the strategy is to stop feeding the pipeline in the first place.

Stopping New Records: Contact Discovery

The leak you can close fastest is contact discovery in the apps you and your friends use. Each of these settings limits what an address-book upload reveals about you, or stops your own uploads from exposing others.

• WhatsApp: Settings, Privacy. Set Profile Photo, About, and Last Seen to My Contacts or Nobody. Under Groups, set who can add you to My Contacts. There is no way to stop others uploading your number; the app is built on it.
• Facebook: Settings, Privacy, How People Find and Contact You. Set "Who can look you up using the phone number you provided" to Only Me. Under Upload Contacts, turn off continuous upload and delete previously uploaded contacts.
• Instagram: Settings, Accounts Center, Your Information and Permissions, Contacts Syncing. Turn off and delete synced contacts. The phone lookup setting is under Privacy, How Others Can Find You.
• TikTok: Settings, Privacy, Sync Contacts and Facebook Friends. Turn both off. Under Suggest Your Account to Others, disable Contacts and Facebook Friends.
• Telegram: Settings, Privacy and Security, Phone Number. Set Who Can See My Phone Number to Nobody and Who Can Find Me By My Number to My Contacts. Under Data Settings, delete synced contacts and turn off sync.
• Twitter/X: Settings, Privacy and Safety, Discoverability and Contacts. Untick "Let people who have your phone number find you" and remove all contacts.
• Snapchat: Settings, Contact Me and See Me in Quick Add. Set to My Friends. Under Contact Syncing, disable and delete.

Stopping New Records: A Separate Number for Signups

Settings limit what apps reveal. They do not stop a marketplace from selling its user list or a delivery app from being breached, and each of those events adds a fresh record linking your number to a name and an address. The only way to stop that is to not give those services your carrier number.

A private TempNumber.me number does this. For a one-off signup, an activation gives a number that receives the verification code and is then released; if that service leaks two years later, the number in its table maps to nobody. For an account you keep, a rental gives a number that is yours for the period you hold it, used nowhere else, so a leak from that one service does not link to the rest of your life. The setup for either is at /disposable-phone-number and /second-phone-number.

Shared public numbers are the wrong tool here. The number is already in every broker's file alongside thousands of other accounts, the messages on it are visible to everyone, and using it adds your account to a cluster that platforms and brokers have already flagged. The point of a separate number is that it is separate; a shared number is the opposite.

The limit of the approach, stated plainly: a new number prevents new linkage. It does not remove the records that already exist, and it does not stop your friends' address books from carrying your carrier number into the next app they install. For those, the opt-outs above and the settings on your friends' phones are the only routes. The broader question of what a temp number protects and what it does not is covered at /blog/temp-number-for-privacy.

A Workable Routine

Removal is a maintenance task, not a one-off. A routine that most people can keep up: run the opt-outs for the eight brokers listed above once, set a calendar reminder to re-check every six months, and turn off contact discovery in every app in one sitting. From then on, give your carrier number only to your bank, your employer, your family, and services that need to reach you by phone. Everything else gets a private number from TempNumber.me, activation or rental depending on whether you are keeping the account. The reasoning for each choice, and the cases where a temp number is the wrong tool, is at /blog/sms-verification-privacy-guide.